Enalean

Records71All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high13CVSS 7.0–8.9

Exploited now

Enalean records in CISA KEV

No Enalean vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Tuleap 68 records HIGH

Records

68 records in Tuleap · all components

TI-2017-05064 CVE-2017-7411 · GHSA-f58h-hjj3-8549

An issue was discovered in Enalean Tuleap 9.6 and prior versions.

HIGH 74

An issue was discovered in Enalean Tuleap 9.6 and prior versions.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.66632 Published 2017-10-30 No fix listed CWE-94

TI-2023-19888 CVE-2023-38508

Tuleap allows preview of a linked artifact with a type does not respect permissions

MEDIUM 64

Tuleap is an open source suite to improve management of software developments and collaboration.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00659 Published 2023-08-24 No fix listed CWE-285

TI-2025-21539 CVE-2025-30203

Tuleap allows XSS via the content of RSS feeds in the RSS widgets

MEDIUM 63

Tuleap is an Open Source Suite to improve management of software developments and collaboration.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00307 Published 2025-03-31 Fixed in 16.5.99.1742562878 CWE-79

TI-2024-16583 CVE-2024-25130

Tuleap's mass update clears the permissions on artifact field

MEDIUM 62

Tuleap is an open source suite to improve management of software developments and collaboration.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00495 Published 2024-02-22 Fixed in 15.5.99.76, 15.5-4 +1 CWE-200

TI-2024-15444 CVE-2024-23344

Tuleap's content of artifacts might be readable by unauthorized users

MEDIUM 62

Tuleap is an Open Source Suite to improve management of software developments and collaboration.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0053 Published 2024-02-06 Fixed in 15.4.99.140 CWE-200

TI-2024-31377 CVE-2024-46988

Tuleap does not properly check permissions for email notifications in trackers

MEDIUM 59

Tuleap is a tool for end to end traceability of application and system developments.

CVSS 3.1MEDIUM 5.7 Network Low privileges User interaction EPSS 0.00352 Published 2024-10-14 Fixed in 15.13.99.40, 15.13-3 +1 CWE-280

TI-2025-33485 CVE-2025-53541

Tuleap is vulnerable to XSS attacks when displaying the children of a parent artifact

MEDIUM 58

Tuleap is an Open Source Suite created to facilitate management of software development and collaboration.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00261 Published 2025-07-29 No fix listed CWE-79

TI-2025-19964 CVE-2025-27094

Tuleap allows default values to be cleared from field configuration

MEDIUM 58

Tuleap is an open-source suite designed to improve software development management and collaboration.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00365 Published 2025-03-03 Fixed in 16.4.99.1739877910 CWE-440

TI-2024-35259 CVE-2024-52599

Tuleap vulnerable to XSS in the Gantt chart of the tracker plugin

MEDIUM 58

Tuleap is an open source suite to improve management of software developments and collaboration.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00321 Published 2024-12-09 Fixed in 16.1.99.50, 16.1-4 +1 CWE-79

TI-2023-17991 CVE-2023-35929

Tuleap Cross-site Scripting vulnerability in the card field of the agile dashboard apps

MEDIUM 58

Tuleap is a free and open source suite to improve management of software development and collaboration.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00473 Published 2023-07-25 No fix listed CWE-79

TI-2022-18611 CVE-2022-39233

Tuleap subject to Missing Authorization allowing for branch prefix modification

MEDIUM 58

Tuleap is a Free & Open Source Suite to improve management of software developments and collaboration.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00835 Published 2022-10-19 Fixed in 14.0.99.24 CWE-862

TI-2025-19969 CVE-2025-27099

Tuleap allows XSS via the tracker names used in the semantic timeframe deletion message

MEDIUM 55

Tuleap is an Open Source Suite to improve management of software developments and collaboration.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.003 Published 2025-03-03 Fixed in 16.4.99.1740067916 CWE-79

TI-2023-20653 CVE-2023-39521

Tuleap vulnerable to Cross-site Scripting on the success message of a kanban deletion

MEDIUM 55

Tuleap is an open source suite to improve management of software developments and collaboration.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00555 Published 2023-08-24 No fix listed CWE-79

TI-2017-05584 CVE-2017-7981 · GHSA-8h34-7hrp-w64c

Tuleap before 9.7 allows command injection via the PhpWiki 1.3.10 SyntaxHighlighter…

MEDIUM 54

Tuleap before 9.7 allows command injection via the PhpWiki 1.3.10 SyntaxHighlighter plugin.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.16125 Published 2017-04-29 No fix listed CWE-78

TI-2025-33775 CVE-2025-53902

Tuleap exposes artifacts to a mentioned user via email notifications

MEDIUM 53

Tuleap is an Open Source Suite created to facilitate management of software development and collaboration.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00367 Published 2025-07-29 No fix listed CWE-863

TI-2025-16078 CVE-2025-22129

Initial effort field does not respect field permissions in the Taskboard REST card representation in Tuleap

MEDIUM 53

Tuleap is an Open Source Suite to improve management of software developments and collaboration.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00333 Published 2025-02-03 Fixed in 16.3.99.1736242932 CWE-280

TI-2024-32042 CVE-2024-47767

Tuleap lists trackers in the quick add actions of the backlog without any permissions check

MEDIUM 53

Tuleap is a tool for end to end traceability of application and system developments.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00442 Published 2024-10-14 Fixed in 15.13.99.113, 15.13-5 +1 CWE-280

TI-2018-05447 CVE-2018-7538 · GHSA-fgmr-7hfc-fhf7

A SQL injection vulnerability in the tracker functionality of Enalean Tuleap software…

MEDIUM 49

A SQL injection vulnerability in the tracker functionality of Enalean Tuleap software engineering platform before 9.18 allows attackers to execute arbitrary SQL commands.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.04223 Published 2018-03-12 No fix listed CWE-89

TI-2014-05982 CVE-2014-7178 · GHSA-hr85-6c3j-3cpx

Enalean Tuleap before 7.5.99.6 allows remote attackers to execute arbitrary commands via…

MEDIUM 48

Enalean Tuleap before 7.5.99.6 allows remote attackers to execute arbitrary commands via the User-Agent header, which is provided to the passthru PHP function.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.05062 Published 2014-11-28 No fix listed CWE-20

TI-2018-12342 CVE-2018-17298 · GHSA-fcc4-fhgg-298h

An issue was discovered in Enalean Tuleap before 10.5.

MEDIUM 46

An issue was discovered in Enalean Tuleap before 10.5.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01756 Published 2018-09-21 No fix listed CWE-640

TI-2014-07210 CVE-2014-8791 · GHSA-38v6-89r5-874g

project/register.php in Tuleap before 7.7, when sys_create_project_in_one_step is…

MEDIUM 42

project/register.php in Tuleap before 7.7, when sys_create_project_in_one_step is disabled, allows remote authenticated users to conduct PHP object injection attacks and execute arbitrary PHP code via the data parameter.

CVSS 2.0MEDIUM 6.0 Network Low privileges Interaction — EPSS 0.14766 Published 2014-12-02 No fix listed CWE-94

TI-2021-19612 CVE-2021-43806

SQL injection in Tuleap

MEDIUM 41

Tuleap is a Libre and Open Source tool for end to end traceability of application and system developments.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01595 Published 2021-12-15 Fixed in 13.2.99.155, 13.1-7 +1 CWE-89

TI-2021-17994 CVE-2021-41155

SQL injection in CVS revisions browser

MEDIUM 41

Tuleap is a Free & Open Source Suite to improve management of software developments and collaboration.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01527 Published 2021-10-18 Fixed in 11.17.99.146, 11.17-5 +1 CWE-89

TI-2021-17993 CVE-2021-41154

SQL injection in the "SVN core" commits browser

MEDIUM 41

Tuleap is a Free & Open Source Suite to improve management of software developments and collaboration.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01527 Published 2021-10-18 Fixed in 11.17.99.144, 11.17-5 +1 CWE-89

TI-2021-17987 CVE-2021-41148

The update of the CI job targeted by a widget is vulnerable to blind SQL injections

MEDIUM 41

Tuleap Open ALM is a libre and open source tool for end to end traceability of application and system developments.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01527 Published 2021-10-15 Fixed in 11.16.99.173, 11.16-6 +1 CWE-89

Open these records in search →